Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
File:                     ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft (raw, json)
Hash identifier:          jKDps2KHqa9Ue5+XtDinM0+hmJobJFFOW40Z4pKH2Zo=
Subject key identifier:   23:44:4D:E4:6A:54:27:29:7A:68:51:90:FA:5D:FB:5C:75:B7:75:9F
Authority key identifier: 64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D
Certificate issuer:       /CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
Certificate serial:       0194BB9725895DBD726D954DAAB50B2DE081
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
Manifest number:          1332
Signing time:             Fri 31 Jan 2025 09:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:32 +0000
Files and hashes:         1: A3dj5P_xKMDJjc-IVzSyCe735rY.roa (hash: +ztHeCTdZHE/HgThAQ7CjX7HR6VG5JPZ0GRqUwHJv5U=)
                          2: ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl (hash: muPyNa3ywd/x3xUBOGV4I+vW5/DPVuOe+h6enWeLeq0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:25:89:5d:bd:72:6d:95:4d:aa:b5:0b:2d:e0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
        Validity
            Not Before: Jan 31 09:00:32 2025 GMT
            Not After : Feb  1 09:00:32 2025 GMT
        Subject: CN=23444de46a5427297a685190fa5dfb5c75b7759f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3b:91:e1:57:64:89:c3:59:6a:8e:e9:03:2c:
                    a2:8c:95:76:46:fd:8f:fc:63:84:6c:7a:05:33:44:
                    fe:ef:b8:ec:78:d7:27:a4:d8:2a:21:fa:7b:83:5c:
                    46:58:07:35:ca:97:6e:6d:92:c9:57:80:4d:7d:ba:
                    cd:d6:8b:72:4a:e2:2c:cf:20:f2:65:7b:91:7f:93:
                    53:eb:2f:a5:cc:c6:f1:ea:21:8a:11:8d:9e:27:00:
                    4f:93:d0:7e:5a:29:28:2c:2a:dc:1e:e6:07:93:02:
                    ba:5b:95:34:ab:df:e6:20:45:55:f5:a4:2b:3d:61:
                    a5:31:6c:11:98:f4:32:3e:1c:e8:96:1f:45:84:09:
                    03:c8:6e:c1:86:42:07:54:3b:97:fe:0c:e3:52:8b:
                    21:5a:d7:0e:ed:ac:61:aa:57:47:d7:af:f4:81:02:
                    d0:8d:93:a7:60:bf:d3:b1:17:6a:df:99:4f:16:95:
                    1d:b3:06:9d:5d:0a:f4:36:93:05:51:6a:b6:92:8c:
                    95:60:05:94:b9:9e:a9:87:37:94:e9:9a:f0:47:79:
                    15:1f:e3:45:a0:40:af:43:af:f8:dc:5d:3e:73:b9:
                    df:e6:10:83:99:9f:30:3c:54:ea:4a:b8:43:24:60:
                    28:c7:97:9b:8d:18:b1:c6:34:90:24:77:82:0f:0b:
                    48:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:44:4D:E4:6A:54:27:29:7A:68:51:90:FA:5D:FB:5C:75:B7:75:9F
            X509v3 Authority Key Identifier:
                keyid:64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b3:dd:81:0e:57:af:92:a0:74:ad:28:50:46:df:b4:ce:c2:
         a8:10:2c:64:fe:0f:63:0b:db:c4:a2:ae:e7:ac:aa:0f:88:8f:
         ae:d6:59:ca:83:ea:6b:d3:32:e5:4a:f4:44:a9:19:d3:79:fb:
         71:c2:6e:fa:fa:cc:6c:69:da:ef:d3:57:9e:f3:41:8a:a3:d8:
         9d:7b:a0:0b:2b:bb:0c:8b:26:36:a0:3b:df:d8:f5:c2:9e:48:
         b4:d3:b0:b0:26:24:91:30:97:ef:8d:e4:01:b9:e8:df:b6:74:
         aa:0f:92:95:f0:50:2e:b5:a5:af:57:7d:de:9e:dd:54:38:03:
         3d:e9:08:78:ba:57:66:1f:5a:73:aa:4b:49:68:1d:23:03:ec:
         92:03:76:61:05:e8:ef:fe:03:b5:c8:cd:51:d3:87:6b:1f:7a:
         31:04:a3:38:b8:2d:7f:4a:d6:c3:07:c0:4f:06:30:c0:b9:93:
         4d:1b:59:41:ec:83:f8:de:86:f3:39:76:fd:02:20:31:0e:87:
         d4:72:ac:74:00:68:e3:91:b4:31:2e:13:03:11:fe:fb:2a:ca:
         10:88:8f:fe:ed:54:c9:dd:f0:2e:59:49:20:85:35:c7:2d:cd:
         62:06:60:c2:b1:fe:df:eb:35:fe:ad:6e:3c:7a:3b:c6:48:25:
         59:a1:e1:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lyWJXb1ybZVNqrULLeCBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NzUzMGI0ZmE4ODk5YTMwYmIyZTY1YjkzZjAxMTlmZGE5
YmMwNWQwHhcNMjUwMTMxMDkwMDMyWhcNMjUwMjAxMDkwMDMyWjAzMTEwLwYDVQQD
EygyMzQ0NGRlNDZhNTQyNzI5N2E2ODUxOTBmYTVkZmI1Yzc1Yjc3NTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTuR4VdkicNZao7pAyyijJV2Rv2P
/GOEbHoFM0T+77jseNcnpNgqIfp7g1xGWAc1ypdubZLJV4BNfbrN1otySuIszyDy
ZXuRf5NT6y+lzMbx6iGKEY2eJwBPk9B+WikoLCrcHuYHkwK6W5U0q9/mIEVV9aQr
PWGlMWwRmPQyPhzolh9FhAkDyG7BhkIHVDuX/gzjUoshWtcO7axhqldH16/0gQLQ
jZOnYL/TsRdq35lPFpUdswadXQr0NpMFUWq2koyVYAWUuZ6phzeU6ZrwR3kVH+NF
oECvQ6/43F0+c7nf5hCDmZ8wPFTqSrhDJGAox5ebjRixxjSQJHeCDwtIjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNETeRqVCcpemhRkPpd+1x1t3WfMB8GA1UdIwQY
MBaAFGR1MLT6iJmjC7LmW5PwEZ/am8BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81N2Y1MTItYTI5Zi00NGVkLWE3YTEt
MGU3Y2JiY2M2MmQwLzEvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81N2Y1MTItYTI5Zi00NGVkLWE3YTEtMGU3Y2JiY2M2MmQw
LzEvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7PdgQ5X
r5KgdK0oUEbftM7CqBAsZP4PYwvbxKKu56yqD4iPrtZZyoPqa9My5Ur0RKkZ03n7
ccJu+vrMbGna79NXnvNBiqPYnXugCyu7DIsmNqA739j1wp5ItNOwsCYkkTCX743k
Abno37Z0qg+SlfBQLrWlr1d93p7dVDgDPekIeLpXZh9ac6pLSWgdIwPskgN2YQXo
7/4DtcjNUdOHax96MQSjOLgtf0rWwwfATwYwwLmTTRtZQeyD+N6G8zl2/QIgMQ6H
1HKsdABo45G0MS4TAxH++yrKEIiP/u1Uyd3wLllJIIU1xy3NYgZgwrH+3+s1/q1u
PHo7xkglWaHhnA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:05 2025 by rpki-client on console-fra.rpki-client.org